Windows Update Changes IE Cookies Names

Anyone who has read my blog knows how I feel about automatic software updates.  My previous posts include

* Auto Updates are Evil
* Update causes OLMAPI32.dll error
* Auto Update Programs Running all the time
* Microsoft Security Update Problems

This week one of the critical updates from Microsoft made a change in how cookie names are displayed by WinPatrol.  This is a minor annoyance and I expect it will affect other programs in one way or another. I’m not sure why but the update appears to have made a global change in how Microsoft names individual cookie files used by Internet Explorer.

While other browsers have individual database entries for cookies, Internet Explorer creates a file where it stores multiple cookies for a particular website. WinPatrol displays a list of each website and allows you to view the contents of the file.

Cookies created before the Windows update still have filenames which make it somewhat obvious where the cookies came from. This allows the WinPatrol Cookie Manager to remove and filter cookies based on portions of their name. At this time filtering out unwanted cookies in IE depends on the filename.

 
Since the update, new cookie names appear to be randomly created filenames. I’m not sure what security issue this resolves but it’s going to make it a harder to use WinPatrol to manage unwanted cookies. If this is the new Microsoft method I don’t see making any kind of change to provide a fix in the near future. The update does not affect how WinPatrol manages Firefox and Chrome cookies.

Chrome Cookies Displayed by WinPatrol

 

Chrome and Firefox store cookies in a SQLite database so WinPatrol is able to display the entire contents of each cookie. The recent update by Windows won’t make any changes to how we display these cookies.

I’m going to get a lot of support Email but otherwise this auto update probably won’t hurt any other Windows function. WinPatrol users will lose some functionality. I’m not sure I will have a fix coming soon but I’ll look into it.

Recommendation: Update anyway

In general, my auto update recommendation hasn’t changed. I set my Windows AutoUpdate setting to “Download updates but let me choose whether to install them”.  There will be a few exception but I usually wait 7-10 days before actually installing the updates.  That allows the rest of world to beta test the change. If there is a severe security fix for a threat which is known to be out in the wild, I will recommend updating immediately. Stay tuned to BitsfromBill for additional information.

In this particular case I would not wait. There are reports of threats actively at work which will allow others to execute programs remotely.  This danger is far more dangerous than any cookies. Given a choice I would accept and install the update from Microsoft Windows.

Update:
Microsoft has confirmed they have decided to change how cookie files are named.   http://blogs.msdn.com/b/ieinternals/archive/2011/08/12/internet-explorer-9.0.2-update-changes-file-protocol-and-cookie-naming.aspx

“We do not expect significant compatibility fallout from this change either, as the names of these files have always been somewhat dynamic. Directly enumerating or reading the Cookie files has never been supported.”

While I agree nobody at Microsoft promised to support this convention, I don’t understand how this change it related to the current threat causing remote execution of machines.

Update 8/14:
I do have a work around the changes that Microsoft has implemented. I do have other changes I’d like to release so hopefully, by the end of the month I’ll have a new release which will provides a user interface that is friendly and intuitive. 

Read More

DroidPatrol Provides PLUS Info for only $1.99

Two years ago when I first started to use my Motorola Droid I knew immediately the Android operating system had a future.  Dreams of a future product made me register the domain “DroidPatrol.com”. Today, the first step in this dream comes true. Anyone with an Android device can go to the Google market and purchase the first release of “DroidPatrol”.

Like WinPatrol the first version of DroidPatrol will be a simple application. New features will be created and added to DroidPatrol so that our new app will soon provide the main WinPatrol feature of letting you know if unexpected changes occur to your Android device.  One of the benefits of the Google Marketplace is that updates can be provided automatically.

The first version of DroidPatrol will sell for only $1.99 but will provide access to the WinPatrol PLUS database, part of the $29.95 value of WinPatrol PLUS. 

If you do use WinPatrol, DroidPatrol will provide PLUS features available directly from your Droid device any where you are.

You don’t have to be a WinPatrol user to use the features of DroidPatrol. Just like WinPatrol PLUS you can enter the name of any file and we'll let you know in human terms what a file does or if you even need the file.

So go to your Droid now and search the market for “DroidPatrol” or go to the online Android Market.

Read More

WinPatrol PLUS Half Price Special

Usually I try to find a special occasion for a WinPatrol PLUS sale but I can tell from recent activity the economy is rough on everyone. For the next two days I’m offering our lifetime upgrade to the newest WinPatrol PLUS for only $14.95 USD or half price our regular price.

Our WinPatrol PLUS Super Family Pack is also discounted $15.00.  You can upgrade your entire family for $34.95 USD.

This discount is also available to our international users. Given the US Dollar conversion to the Euro this is a real bargain to non-US orders. At this price it’s not even worth using a keygen or pirated version of WinPatrol PLUS.

So, if you’ve been considering WinPatrol PLUS the time is now!

BillP Studios is a company you can trust. We’ve been working on WinPatrol for over a decade. How many companies do you deal with who give you a real physical address?

Read More

One Little “G” Can Make a Big Difference

It doesn’t matter who you are, how educated you, even if security is your profession it’s still possible to failure.  Yesterday, everyone was talking about the cool Google Home Page created to celebrate the birthday of guitar genius Les Paul. Today, I will admit how stupid even I can be.

Naturally, I followed my own advice and instead of clicking on one of my friends links posted on Facebook, I manually typed in the Google URL. The only problem is I screwed up big time and typed
G-o-g-g-l-e-.-c-o-m instead of
G-o-o-g-l-e-.-c-o-m. 
Well, unlike Google, the folks at Goggle are anxious to do evil.

Normally, the first screen would have given me a clue but I wasn’t paying full attention. I figured, “it was Google, one of my partners so it must be legit”.

I still never noticed the misspelling.  I knew they would be getting extra traffic due to the Les Paul screen so I figured they’d use this day to run a special promotion.

After a few simple questions I received the following screen.

Again, I figured, Google already had my phone number and Email so what’s the big deal giving it to them to validate my information. Since I was multitasking at the time, I still didn’t notice the obvious misspelling of the main logo.

Ironically, I appreciate that these scammers at least verified I was entering a valid phone number. If not, anyone could use their site to harass unsuspecting cell phone users around the country.

 

Finally, I woke up.  As soon as I started to see mentions of a bank card and other companies I knew something was wrong.  Yet, I still never thought to check my spelling. My first thought was to check my HOST file and scan for malware.  I even copy and pasted the URL into another browser to verify the address without noticing the spelling error.

The next slap in the face came when my cell phone rang with a call from 877-729-0716.  The caller identified himself as “Education Experts”.  They obviously were connected to this scam so instead of listening to their sales pitch I encouraged the telemarketer to find a job with a reputable company.

It still took my brain a couple minutes to realize my typo. I don’t remember ever doing this before but I hope I’ve learned my lesson.  Watch your typing and give your browser your full attention so this doesn’t happen to you.  ;)

Read More

QuickTime Most Popular Unwanted File

The release of Windows 95 was suppose to spell the end of Microsoft’s 8.3 filename specifications.  The folks in Redmond hailed the era of long filenames that would provide better descriptions of what a file would be used for. Unfortunately, years later Microsoft and others continue to use filenames which are small and non-descriptive.

WinPatrol PLUS is a program which allows users to click on a filename and read an description of a file and find out if it’s required. Apple Computer once bragged about long filenames but stick their files with cryptic filename into Windows Startup Programs and have them running in the background.

One of the ones most commonly requested belongs to QuickTime and tends to stick itself back into the autorun registry frequently. Below is the results from our online Cloud stats.

QTTASK.EXE – Apple’s QuickTime Player

8,425 Requests for information on this file.
47,426 Users chose to allow this file to run.
105,864 Users decided to prevent this file from running.

Apple’s QuickTime holds the record for the file WinPatrol users want removed. It doesn’t help that Apple keeps trying to put QTTASK.exe back even after it’s removed. Luckily, WinPatrol has a Disable function so we can automatically remove it without any alert messages.

More Mystery Files
There are plenty of other filenames which WinPatrol users were confused about and/or wanted more information. You’ll notice most users made their decision without checking the Info that is available to WinPatrol PLUS members.

The 1st number represents how many times a WinPatrol PLUS member requested an explanation or description of a filename.
The 2nd number indicates how many times, when alerted, a user clicked on “Yes” to say they approved the file and wanted it to continue loading. 
The 3rd number indicates a user clicked No. It can also indicate the filename was found in one of WinPatrol’s lists and made the decision to remove the file entry from the registry or kill the file while it was running.

ADOBEARM.exe - Adobe Acrobat Reader Manager

7,254  Requests for information on this file.
51,676  Users chose to allow this file to run.
61,017  Users decided to prevent this file from running.

IGFXTRAY.EXE - INTEL Graphics Card System Tray Icon

4,083  Requests for information on this file.
9,815  Users chose to allow this file to run.
11,799 Users decided to prevent this file from running.

MSSECES.EXE - Microsoft Security Essentials

4,812 Requests for information on this file.
32,440 Users chose to allow this file to run.
13,342 Users decided to prevent this file from running.

GOOGLEUPDATE.EXE - Google Automatic Update

4,001 Requests for information on this file.
49,317 Users chose to allow this file to run.
30,362 Users decided to prevent this file from running.

JUSCHED.EXE - Sun's Java Plug-in Updater

6,485 Requests for information on this file.
68,538 Users chose to allow this file to run.
56,428 Users decided to prevent this file from running.

CTFMON.exe - Alternative User Input Text Manager

2,508  Requests for information on this file.
6,521 Users chose to allow this file to run.
18,240 Users decided to prevent this file from running.

Read More

Facebook Wants Your Pre-Teen

If you look at the terms of service for many websites you’ll find they claim users under 13 are not allowed.  This is required to protect themselves against COPPA (Child Online Privacy Protection Act). Even the search engine Ask.com notes “you may not register for the Community feature or create a user profile if you are under 13.” At the same time they market various products towards kids including Zwinky and Smiley Central using an invasive toolbar.

Facebook CEO Mark Zuckerberg is now recommending removing the under-13 restrictions. Mark’s main reason is education. I have no doubt the first lesson kids will learn is how easy it is to give away your personal information and get scammed. Then again, they might think it’s normal for Facebook to post messages to all their friends without their approval.

I haven’t talked to many people who think Facebook should be open to children under 13. That includes all the parents who already allow their pre-teens to have a Facebook account.  Their response is always be how they supervise what their kids are doing online so it’s ok. If you think it’s ok for kids under 13 to create a Facebook profile or your pre-teen already has an account click comments below and share your opinion.

For full disclosure, both my daughters have been online since 1983 and they received an exceptional education. Given my role in the evolution of the online world they did have a much different experience.
Erica (right) was running trivia games in chat rooms when she was 9 but she was among friends. She never experienced the predators that currently roam the various globally created pages that appear at random. Now in their 30’s they could teach classes on internet safety.

On the other hand, my oldest grand daughter who recently turned 13 has blocked me from Facebook.  I used to send her links like “Who Gets Your Personal Information on Facebook” and the “Think Before You Post” which she thought would never apply to her.  She’s a member of the Share-it-all and the It-would-never-happen-to-me generation. She thinks it’s fun to pose as a 19 year old.

There are plenty of educational benefits to the Internet but for pre-teens Facebook is not one of them.  The parents who grew up with Nancy Reagan’s “Just Say No” campaign should apply it to their kids as well. Again, I’m an old fart and this is my opinion. I encourage you to post yours.

Related Stories:

Consumers Union urges stronger Facebook protections for children

13 year old suspended for Facebook post wishing bin Laden killed math teacher

Facebook’s Zuckerberg Wants Kids Under 13 To Use Site

7.5m Facebook users are under 13

Senator To Facebook CTO: Your Company Is 'Indefensible'

Read More

64-bit Windows is here, Like it or Not.

If you’re in the market for a new Windows computer you’ll be joining the ranks of x64-bit processor users. It used to be an option but these days 64-bit systems are standard configurations.  The infiltration of the market has increased dramatically this year and many programmers like myself are working extra hours to catch up with some of the quirks that arrived with 64-bit systems. 

For a long time many people stayed away from 64 bit systems because they feared lack of support for their legacy hardware devices. Those fears have seemed to disappear but many of us have noticed quirks in 64-bit systems that affect regular software.  Unfortunately you won’t have much choice and will be encouraged to purchase a machine that comes with the 64-bit version of Windows. 

I’m not a 64-bit fan
If I didn’t have to support all my friends with 64 bit machines I wouldn’t have one. When I asked on twitter for a reason we need 64 bit the typical answer was to have more memory.
Local programmer Chris Miller, @anotherlab said, “64bit Windows means you can have more than 4Gb of RAM, which is great for a developer with a mess of apps all running at once.”
Personally, I would be just as happy this year with only 4 GB’s and a fast SSD to use as virtual memory.

The most affected software are low level utilities like my WinPatrol. Most software won’t have serious problems but like many security programs WinPatrol uses low level API’s directly for optimized performance and to catch malware at infiltration points.

Over the last year I’ve continued to distribute a 32-bit version of WinPatrol and worked around various quirks.  It’s obvious now that if I want to continue to enhance WinPatrol and create more powerful features I’ll need a 64-bit only version.  That will be my primary focus this summer.

Programming 64 Bits
According to Microsoft, “The key is that all of the existing Win32 knowledge you have directly applies to the 64-bit version of Windows, and the majority of your code should compile for the 64-bit platform without changes.”. 
Any programmer who hasn’t started 64-bit programming is already way behind. If you thought your biggest challenge going to update your data types you’re sadly mistaken. You’ll find many new changes and promises of maintaining the same code base may be true but only if you’re willing to drop support for XP, W2K and systems with limited performance.

According to well known programmer, Merijn Bellekom, "It's pretty unclear in the MSDN what is mirrored and what is redirected, especially when both 32-bit and 64-bit versions of an application exist, like MSIE itself."

Other programming experts have clued me in that many routines which provide WinPatrol’s optimized performance will have to go.

64-bit Stats
Getting access to real data on 64-bit usage hasn’t been easy. That fact has held up a lot of development efforts. While web sites are provided a lot of useful data in a browsers user agent data, the CPU size isn’t provided.  Luckily, my friends at PC Pitstop have been following the increase in 64-bit Windows for over two years and have provided some surprising stats.

My first surprise was to see that our neighbors to the north lead the way in 64 bit implementation.

Not as much of a surprise is that more home users have been sold on 64 bit Windows than businesses.

For more information on 64-bit stats visit http://techtalk.pcpitstop.com/64-bit-operating-systems/

Read More